Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a091b9a-2a06-3f97-9879-9dc836551426.roa
File:                     2a091b9a-2a06-3f97-9879-9dc836551426.roa (raw, json)
Hash identifier:          RsyaaWV0vBCWypmctnl8r+g+0C/7Usx/U4E8UBQK8zU=
Subject key identifier:   E1:20:06:7E:C1:F6:A7:B1:43:0C:C1:7F:13:85:50:33:CB:55:35:5A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8DC19424F128F2B06F55D980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a091b9a-2a06-3f97-9879-9dc836551426.roa
Signing time:             Fri 18 Jul 2025 00:19:47 +0000
ROA not before:           Fri 18 Jul 2025 00:19:47 +0000
ROA not after:            Thu 16 Oct 2025 00:19:47 +0000
asID:                     6939
IP address blocks:        172.120.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:c1:94:24:f1:28:f2:b0:6f:55:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 18 00:19:47 2025 GMT
            Not After : Oct 16 00:19:47 2025 GMT
        Subject: CN=2db75920-eb6d-45ae-9334-651b539ca89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:43:4e:a9:d2:c3:98:b2:34:a8:e4:cf:7f:c2:
                    5d:40:b6:2c:11:a7:4d:b7:0a:72:aa:46:4b:c2:73:
                    e2:c4:92:d4:13:d6:cf:bd:22:00:e5:17:0f:f2:04:
                    46:12:23:da:8d:c5:52:5a:61:72:81:02:59:e3:30:
                    37:81:4a:5f:87:f3:7d:15:c5:b2:db:81:eb:37:80:
                    20:36:b8:d2:b8:62:7c:9e:e1:52:47:3e:eb:05:da:
                    07:ec:ae:b7:ba:77:c8:e9:67:8f:22:6e:5a:02:1b:
                    ef:cb:64:fd:d5:63:35:92:db:ff:d9:d9:86:cf:c0:
                    bc:79:4e:2c:2b:b8:73:0e:af:78:3b:5d:ea:32:9c:
                    91:2a:87:ff:05:59:6e:c9:e3:12:3a:3e:5c:f1:99:
                    6a:20:03:06:16:44:cb:09:23:e8:a2:7f:18:80:04:
                    23:3a:b0:4a:4c:15:61:67:75:8d:f2:a5:06:44:f5:
                    c1:3a:aa:6f:50:84:c3:c3:f0:a8:7f:18:d5:67:a9:
                    9e:bc:aa:dd:27:e4:90:0c:88:52:8c:6b:37:45:e6:
                    46:80:43:21:aa:4e:af:46:9a:6b:b9:ae:31:8e:ef:
                    d0:7d:22:41:c1:68:49:ef:84:65:f6:8a:57:cb:3f:
                    6f:27:a5:a1:14:a8:c8:03:1e:7d:72:fd:3c:27:86:
                    65:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:20:06:7E:C1:F6:A7:B1:43:0C:C1:7F:13:85:50:33:CB:55:35:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a091b9a-2a06-3f97-9879-9dc836551426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:17:78:35:c8:fc:ee:d3:d5:db:99:72:2c:2c:02:76:24:63:
         f2:61:c1:e3:3b:83:95:63:5c:a7:93:36:e2:6f:85:d6:1f:f7:
         3b:84:8e:bf:6c:3c:e4:04:dc:3e:f2:5d:41:fb:e8:3f:44:f8:
         6f:d8:d6:6f:55:ed:cb:3c:cf:c7:3b:70:bd:5d:d9:ff:78:a1:
         13:69:da:98:55:6f:98:ee:4c:8f:b1:53:5e:55:ad:d7:b9:22:
         ce:07:e7:95:67:17:bb:2d:ca:5b:96:28:e7:c8:2c:55:e6:22:
         6e:29:e9:39:da:49:47:15:33:ed:96:bf:82:99:35:ac:8f:c4:
         1a:fb:2b:e9:ed:00:b3:9b:2c:aa:fb:2c:04:d2:53:92:0d:ed:
         fe:f3:2f:6b:1d:a6:37:db:53:80:bd:32:a3:cf:d5:c8:9b:fd:
         09:6a:0d:8d:46:25:ce:8f:48:c9:9c:95:98:3d:e6:aa:83:ac:
         45:6b:07:5e:37:9b:df:49:06:35:f7:85:22:9c:c2:29:92:b0:
         51:82:98:cf:42:1c:31:54:a5:76:f3:e0:8f:9d:78:82:af:d1:
         6b:de:b8:9d:36:a6:6e:9d:92:fb:a3:45:08:36:5f:78:cd:88:
         af:9b:41:0c:cb:21:e9:81:3b:f5:4f:35:89:b6:76:c0:3f:53:
         2f:83:67:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqNwZQk8SjysG9V2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcxODAwMTk0N1oXDTI1MTAxNjAwMTk0N1owLzEtMCsGA1UEAxMk
MmRiNzU5MjAtZWI2ZC00NWFlLTkzMzQtNjUxYjUzOWNhODliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUNOqdLDmLI0qOTPf8JdQLYsEadNtwpyqkZL
wnPixJLUE9bPvSIA5RcP8gRGEiPajcVSWmFygQJZ4zA3gUpfh/N9FcWy24HrN4Ag
NrjSuGJ8nuFSRz7rBdoH7K63unfI6WePIm5aAhvvy2T91WM1ktv/2dmGz8C8eU4s
K7hzDq94O13qMpyRKof/BVluyeMSOj5c8ZlqIAMGFkTLCSPoon8YgAQjOrBKTBVh
Z3WN8qUGRPXBOqpvUITDw/CofxjVZ6mevKrdJ+SQDIhSjGs3ReZGgEMhqk6vRppr
ua4xju/QfSJBwWhJ74Rl9opXyz9vJ6WhFKjIAx59cv08J4ZlhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOEgBn7B9qexQwzBfxOFUDPLVTVaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmEwOTFiOWEtMmEwNi0z
Zjk3LTk4NzktOWRjODM2NTUxNDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHg6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADsXeDXI/O7T1duZciwsAnYkY/JhweM7g5VjXKeTNuJvhdYf9zuEjr9s
POQE3D7yXUH76D9E+G/Y1m9V7cs8z8c7cL1d2f94oRNp2phVb5juTI+xU15Vrde5
Is4H55VnF7styluWKOfILFXmIm4p6TnaSUcVM+2Wv4KZNayPxBr7K+ntALObLKr7
LATSU5IN7f7zL2sdpjfbU4C9MqPP1cib/QlqDY1GJc6PSMmclZg95qqDrEVrB143
m99JBjX3hSKcwimSsFGCmM9CHDFUpXbz4I+deIKv0WveuJ02pm6dkvujRQg2X3jN
iK+bQQzLIemBO/VPNYm2dsA/Uy+DZzo=
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:20:44 2025 by rpki-client